Behavioral task
behavioral1
Sample
5f5aa9966e38848221513c4a116fdf1a006ddf24964cca265272b85b1838524d.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
5f5aa9966e38848221513c4a116fdf1a006ddf24964cca265272b85b1838524d.exe
Resource
win10v2004-20240802-en
General
-
Target
5f5aa9966e38848221513c4a116fdf1a006ddf24964cca265272b85b1838524d
-
Size
264KB
-
MD5
30be4ac31098c0a280f5d98ace229c34
-
SHA1
0dc4a3dc1fb415f516702456d4c0e143afacbf8f
-
SHA256
5f5aa9966e38848221513c4a116fdf1a006ddf24964cca265272b85b1838524d
-
SHA512
6b410d9037defeb3b598091aff284e848944d1ce076eb5e9d12a7a05ab0818ec5b53ad0cc86aeca7f0b98dd148aeca48b933d7a19d717ba7b29e5e97db928494
-
SSDEEP
3072:xfucCwxx9GRtB1R3UT4PqDVcksL2p9kJP95AuoHNouFNfm/Em25Pvu7NBQ:RwyxIRtB1R3UoMVGJLr0NfhmYux
Malware Config
Signatures
-
Agenttesla family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5f5aa9966e38848221513c4a116fdf1a006ddf24964cca265272b85b1838524d
Files
-
5f5aa9966e38848221513c4a116fdf1a006ddf24964cca265272b85b1838524d.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 239KB - Virtual size: 239KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ